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Top Stories 

• The extended shutdown of a sister company of the pharmacy at the center of the deadly 
U.S. meningitis outbreak may exacerbate drug shortages for some hospitals and healthcare 
providers as the number of infection cases neared 300, U.S. health regulators said October 
22. - Reuters (See item 

• Five Points Correctional Facility in Seneca County, New York, was put on lockdown after 
a riot the weekend of October 20 injured six officers. The lockdown was expected to last 
through the end of the week of October 22. - WHAM 13 Rochester (See item 2^ 

• A New York City Police Department (NYPD) officer admitted to stealing guns from police 
lockers and selling them to drug dealers to pay for his addiction to painkillers. He pleaded 
guilty October 22 to selling four stolen NYPD-issued guns and an additional pistol that 
belonged to him. - Associated Press (See item 2^ 

• Web sites that use Amazon’s AWS cloud-computing service for hosting were down as it 
experienced “degraded performance”" in its northern Virginia zone October 22. The sites 
included Reddit, Coursera, Flipboard, FastCompany, Foursquare, Netflix, Pinterest, and 
Airbnb. - Forbes (See item 
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Energy Sector 

Nothing to report 
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Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials and Waste Sector 

1. October 22, Associated Press - (Washington) Energy Dept.: Slow leak in Hanford 
waste tank. There is a slow leak in the oldest double-shell waste tank at Hanford, 
Washington’s Hanford Nuclear Reservation that is allowing highly radioactive and 
hazardous waste to leak between the inner and outer shells, the U.S. Department of 
Energy (DOE) said October 22. No waste was believed to have leaked from the outer 
shell into the soil beneath the underground tank, the agency said. While the exact 
amount was not known, the agency said a couple tablespoons of additional waste was 
seen between October 18 and October 21. The tank is one of 28 double-shell containers 
used to hold waste from older, single-shell tanks. They hold 56 million gallons of 
radioactive waste from production of weapons plutonium until it can be treated for 
disposal. The tank is roughly 40 years old and contains about 850,000 gallons of sludge 
and liquid waste. Plans call for twice-weekly visual inspections using cameras and 
regular checks of liquid levels inside the primary tank, said the assistant manager for 
the Tank Earms Project. He added that his people are “working collaboratively” with 
the Washington Ecology Department to determine what to do next and to “ensure that 
we are effectively protecting the public and the environment.” Routine monitoring has 
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not detected leaks in any other double-shell tanks, DOE said. 

Source: http://www.timesunion.com/business/energv/article/Energv-Dept-slow-leak-in- 
Hanford-waste-tank-3972494.php 
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Critical Manufacturing Sector 

Nothing to report 
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Defense Industrial Base Sector 

Nothing to report 
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Banking and Finance Sector 

2. October 22, Reuters - (International) U.S. exchange flags internal trading 
discrepancy. U.S. exchange operator Direct Edge said October 22 that it found a 
discrepancy between how a stock trades in certain circumstances compared with what 
its rules state, a contradiction at the center of a growing debate over market complexity 
and fairness. The discrepancy that Direct Edge found in its mid-point-match (MPM) 
order types has existed since trading platform EDGX officially launched as a national 
securities exchange in July 2010, the company said in a notice to traders. An order type 
is the set of instructions that govern the price and other variables in stock transactions. 
The discrepancy involves the exchange’s Rule 11.8(a)(2), which is supposed to assign 
priority to MPM orders over, among others, non-displayed limit orders. Direct Edge 
said EDGX usually assigns priority for MPM orders but it identified a circumstance in 
which the trading platform did not. In addition, the likelihood that MPM orders are 
executed and result in price improvement is higher because they automatically interact 
with displayed order flow. How often the trading priority that MPM was supposed to 
deliver but did not was not indicated in the trading notice. 

Source: http://www.reuters.eom/article/2012/10/22/us-exchanges-directedge- 
idUSBRE89E15X20121022 



3. October 21, KSWB 5 San Diego - (California) ‘Chubby Bandit’ bank robbery 
suspect arrested. A man suspected of being the “Chubby Bandit” was arrested 
October 21 for allegedly robbing a pharmacy and five banks in the San Diego area and 
an attempt to rob a sixth, law enforcement officials said. According to the EBI, the 
heavy-set man dubbed the “Chubby Bandit’ ’ first struck October 9, holding up a US 
Bank branch in Poway. He then allegedly robbed a CVS Pharmacy in San Marcos 
October 10, a Chase Bank branch in Carlsbad October 11, and attempted to rob another 
Chase Bank branch in Solana Beach October 13. The bandit then allegedly robbed a 
Wells Eargo Bank branch in Encinitas October 15, a US Bank branch in Carlsbad 
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October 16, and a Wells Fargo Bank in San Diego October 18. In all the robberies, the 
bandit used a demand note and said he had a gun, officials said. 

Source: http://www.fox5sandiego.com/news/kswb-chubby-bandit- 
arrested,0,301 1373. story 
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Transportation Sector 

4. October 23, Associated Press - (California) Big-rigs collide in interstate truck 
tunnel. Nine big-rigs collided in an Interstate 5 truck bypass tunnel in the Newhall Pass 
north of Los Angeles. Rainy weather may haye been a factor in causing the October 23 
jumble in the tunnel 25 miles north of downtown. A jackknifed big-rig in the tunnel 
apparently caused the chain -reaction crashes. KTTV 11 Los Angeles said firefighters 
had to pry a trucker out of his demolished rig. He was taken to a hospital. The 
California Highway Patrol said the southbound, two-lane truck bypass tunnel would 
likely be closed for about 7 hours, while wreekage was cleared and spilled diesel fuel 
was mopped up. 

Source: http://www.sacbee.eom/2012/10/23/4931408/big-rigs-collide-in-interstate.html 

5. October 23, Lynchburg News and Advance - (Virginia) School bus wreck sends seven 
children to hospital. Seyen children were transported to Danyille Regional Medical 
Center (DRMC) Oetober 23 after a driyer of a car rear-ended a stopped school bus on 
Martinsyille Highway near Brosyille, Virginia. According to witnesses at the scene, the 
driyer of the yehicle was weaying in and out of traffic before he hit the school bus, said 
a Virginia State Police trooper. The driyer was also transported to DRMC with a head 
injury, the trooper said. His injuries were non-life threatening. A total of 16 ehildren 
were on the bus, and 7 were transported with non-life threatening injuries. The other 
children were checked at the seene and were transported to school. The PittsyWania 
County school superintendent said the remainder of the ehildren who were being 
transported would be eyaluated again by a nurse waiting at the school. Charges were 
pending against the car driyer. 

Source: http://www2.newsadyance.com/news/2012/oct/23/school-bus-wreck-sends- 
seyen-children-hospital-ar-2305023/ 

6. October 23, Homeland Security News Wire - (National) TSA replaces backscatter 
scanners with millimeter wave scanners at some airports. The Transportation 
Security Administration (TSA) is replacing some backscatter seanners at large U.S. 
airports with millimeter wave scanners. Homeland Security News Wire reported 
October 23. Backscatter scanners have drawn the criticism of travelers since they 
debuted a several years ago. Many travelers felt the scanners invaded their privacy and 
others were concerned about the radiation levels the scanners emit. KNSD 7 San Diego 
reported that TSA said the scanners were being replaced to make way for more 
efficient machines in an effort to make security checks faster at some of the larger 
airports around the country. Backscatter scanners were removed from major airports 
ineluding Los Angeles International Airport, Chicago’s O’ Hare International Airport, 
and New York’s John F. Kennedy International Airport. The backseatter scanners were 
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still being used at some larger airports, but would mainly be relocated to smaller 
airports with less foot traffic. According to TSA, the new scanners — known as 
millimeter wave scanners — use a computer program to detect potential threats, while 
displaying an image of a traveler similar to a cartoon. TSA has insisted that the 
radiation the backscatter scanners emit have nothing to do with them being replaced; 
radiation experts believe the millimeter wave scanners are safer. 

Source: http://www.homelandsecuritvnewswire.eom/dr20121022-tsa-replaces- 
backscatter-scanners-with-millimeter-wave-scanners-at-some-airports 

7. October 23, KTXL 40 Sacramento - (California) Westbound Interstate 80 closed at 
Truckee. Heavy snowfall and an unfinished road construction project contributed to 
major traffic delays on westbound Interstate 80 in the Sierra October 22. The freeway 
was closed to westbound traffic at Truckee, California, because of multiple traffic 
problems between Truckee and Emigrant Gap. As of October 23, the closure was still 
in effect. Westbound traffic was limited to one lane for several miles between Donner 
Summit and Emigrant Gap because of a road construction project that was in progress 
when the snow started falling October 22. With only one lane open, vehicles, especially 
trucks, that got stuck in the snow ended up blocking the entire freeway until they could 
be towed or provided with tire chains. Traffic was simply not moving at all for several 
hours. Because of the traffic, plows could not access portions of the interstate to clear 
snow, making it even more difficult for cars that were stuck as the snow continued to 
fall. 

Source: http://fox40.eom/2012/10/23/westbound-interstate-80-closed-at-truckee/ 

8. October 23, Homeland Security News Wire - (National) Analyzing the sound of rain 
falling on a bridge reveals bridge’s health, stability. A team of Brigham Young 
University (BYU) engineers found that by listening to how a highway bridge sings in 
the rain, they can determine serious flaws in the structure. Homeland Security News 
Wire reported October 23. Employing a method called impact-echo testing, a team of 
professors can diagnose the health of a bridge’s deck based on the acoustic footprint 
produced by a small amount of water. Specifically, the sound created when a droplet 
makes impact can reveal hidden dangers in the bridge. A BYU release reported that the 
study, published in the October issue of Non-Destructive Testing and Evaluation 
International, presents a more efficient and cost-effective method to address the 
mounting safety concerns over bridge corrosion and aging across the United States and 
beyond. While impact-echo testing for bridges is not new, the BYU researchers were 
the first to use water droplets to produce acoustic responses. The most common method 
involves dragging a chain over a bridge and marking spots where dull, hollow sound is 
produced. This method, however, can take hours to carry out for a single bridge and 
requires lane closures that come with additional complications. Though the current 
research is preliminary, the researchers envision a day where bridge deck surveys 
would take only a few moments. 

Source: http://www.homelandsecuritvnewswire.eom/dr20121022-analvzing-the-sound- 
of-rain-falling-on-a-bridge-reveals-bridge-s-health-stabilitv 

9. October 22, Riverside Press-Enterprise - (California) S.B. Mountains: Runaway rig 
hits car, crash kills 2. A mechanical inspection will be conducted on a three-axle 
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flatbed truck to determine whether its brakes failed prior to a wreck that closed 
Highway 330 between Highland, California, and the mountaintop town of Running 
Springs for 7 1/2 hours October 22. A truck driver jumped or fell to his death along a 
mountain highway, leaving a runaway rig to jackknife across an entire road until it 
crushed an oncoming car, killing that driver and injuring the passenger, investigators 
said. The car’s passenger was taken to a hospital for treatment of chest and left leg pain 
and scrapes to her right hand, a California Highway Patrol officer said. 

Source: http://www.pe.com/local-news/san-bemardino-countv/san-bernardino-countv- 
headlines-index/20121022-s.b.-mountains-runawav-truck-crash-kills-2.ece 
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Postal and Shipping Sector 

Nothing to report 
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Agriculture and Food Sector 

10. October 22, U.S. Department of Agriculture Food Safety and Inspection Service - 
(National) Recall notification report - Bob Evans Maple Links and Maple 
Patties. October 22, BEF Foods Inc., a Columbus, Ohio corporation, recalled 
approximately 1,768,600-pounds of Bob Evans Maple Finks and Maple Patties because 
they are misbranded in that they contain monosodium glutamate (MSG), which is 
incorrectly declared on the label. The products were available in 12-ounce packages, 
and have a use by date between October 14, 2012, and December 4, 2012. Frozen 
products may be identified by any of the following Julian codes: 0264 through 0365, 
1001 through 1365, and 2001 through 2293. The problem was discovered by the 
company during a label audit, and found MSG was still a listed ingredient although the 
spice blend was previously reformulated without MSG. 

Source: http://www.fsis.usda.gov/Fsis Recalls/RNR 067 2012/index. asp 

11. October 22, U.S. Department of Agriculture Food Safety and Inspection Service - 
(Utah) Utah firm recalls ground beef products due to possible E. Coli 0157:H7 
contamination. October 22, Main Street Quality Meats, a Salt Fake City, Utah 
establishment, recalled approximately 2,310-pounds of ground beef products that may 
be contaminated with E. coli 0157:H7. The recall includes 10-pound cases of Ground 
Beef Bulk and 12-pound cases of Ground Beef Patties. Each case bears the 
establishment number EST. 19916 inside the U.S. Department of Agriculture mark of 
inspection, as well as any of the following identifying lot numbers: 1018121, 1019121, 
1018122, or 1019122. The products were distributed to restaurants in Utah. 

Source: 

http://www.fsis.usda.gov/News & Events/Recall 068 2012 Release/index. asp 

12. October 22, U.S. Department of Agriculture Food Safety and Inspection Service - 
(Hawaii) Hawaii firm recalls ground beef products due to possible E. Coli 
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0157 :H7 contamination. October 22, Higa Meat & Pork Market, a Honolulu, Hawaii 
establishment, reealled approximately 4,100-pounds of ground beef produets that may 
be eontaminated with E. eoli 0157:H7. The reeah ineludes 10-pound bags of Higa 
Market-Ground Beef Bulk which come in 1 to 6 bags per carton/case. Eaeh ease bears 
the establishment number EST. 12457M inside the U.S. Department of Agrieulture 
mark of inspeetion, as well as the identifying ease eode number 291. The produets were 
distributed to restaurants in the Oahu, Hawaii area. The problem oeeurred as a result of 
the products testing positive for E. coli 0157:H7 and being shipped prior to the 
company receiving test results. 

Souree: 

http://www.fsis.usda.gov/News & Events/Recah 069 2012 Release/index. asp 
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Water Sector 

13. October 23, WBND 57 South Bend - (Miehigan) EPA addresses concerns about 
Benton Harbor contamination site. The U.S. Environmental Protection Agency 
(EPA) said vinyl chloride spreading in the groundwater beneath the Harbor Shores Golf 
Course in Miehigan was part of a long term cleanup method. EPA officials scheduled a 
publie meeting Oetober 23 in Benton Harbor to diseuss a new remediation plan for the 
aireraft eomponents superfund site. The site is eurrently hole 14 on the eourse. The 
aircraft components plant was tom down in 1997 along the Paw Paw River and 
Northshore Drive. The EPA suecessfully cleaned radium from the surface but soil and 
groundwater still earries four different eontaminants. The impaet study showed the 
spread of vinyl ehloride in the groundwater around the site from 2004-2012. Vinyl 
chloride is known to cause eancer. “You’re expanding the. . .vinyl chloride as part of 
the process,” said an EPA projeet manager. The current treatment methods at the site 
breakdown eontaminants into vinyl ehloride. She said the EPA expeeted the spread of 
the eontamination plume. “No one is being exposed. Right now you’re not allowed to 
drill any wells there, nobody has any there,” the projeet manager said. 

Source: http://www.abc57.com/news/local/EPA-addresses-concems-about-Benton- 
Harbor-eontamination-site- 17534491 1 .html 



14. October 23, Kankakee Daily Journal - (Illinois) Water main breaks in Momence; 
24-hour boil order in effect. A water main break occurred on East Washington Street 
in Momence, Illinois, the Kankakee Daily Journal reported October 23. “[Workers] had 
to reduee the amount of pressure to work on the break,” a spokesman said. To reduee 
the incoming water pressure to the broken main, workers first turned on nearby fire 
hydrants at about 2 p.m., but the shut-off valves still would not budge. Workers then 
stopped the wells from filling the water towers to drop pressure even further. 
Eventually, water pressure in the town dropped to 20 pereent, a level that necessitated 
the boil order. The spokesman said the main was repaired, and water pressure in the 
town would quickly return to its usual level. He said residents were free to shower, 
bathe, do laundry, and use water otherwise as normal, but for safety reasons, the boil 
order would remain in effeet until Oetober 23. He did not know what eaused the break. 
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but suspected it may have been the result of normal wear and tear. 

Source: http://dailv-ioumal.com/archives/dj/display.php?id=498356 

15. October 23, Pocono Record - (Pennsylvania) Monroe County streams found with 
fecal contamination. One recently tested stream in Monroe County, Pennsylvania, had 
85 times more waste than allowed by the State, the Pocono Record reported October 
23. Other sites were found to be contaminated with fecal coliform, according to a State- 
funded water sampling program conducted during the summer of 2012 by the Brodhead 
Watershed Association. The worst site in the watershed was Forest Hills Run, which 
runs through Mount Pocono and Paradise Township. Testing of one sample showed 
17,000 coliform-forming units per 100 milliliters (ml) of water. Four other samples 
exceeded the standard for swimming or other water activities. The maximum fecal 
coliform count allowed by state regulation from May 1 -September 30 is 200 units per 
100 ml of water. The rest of the year, the maximum permitted is 2,000 units per 100 ml. 
The Brodhead itself, at Glen Park in Stroudsburg, exceeded State limits, where 7 of 10 
samples were in excess of the maximum acceptable fecal waste levels. While fecal 
coliform bacteria do not cause disease, its presence means human or animal fecal waste 
is in the water, and the waste may potentially contain disease-causing pathogens. The 
results were forwarded to the State. They were also sent to the affected municipalities, 
with suggestions for additional testing, according to the watershed association. 

Source: 

http://www.poconorecord.com/apps/pbcs.dll/article?AID=/20121023/NEWS/21023033 
7/- 1/NEWS 



16. October 23, Akron Beacon Journal - (Ohio) Boil alert for Hudson, Twinsburg water 
users. A boil alert was issued for residents in the Hudson, Twinsburg, and Twinsburg 
Township areas of Ohio who get their water supply from A kr on. A water main break 
was reported October 23 in Hudson, causing reduced water pressure. Customers should 
expect normal pressure to return later in the day, the city of Akron said in a news 
release. Customers in the affected area who are not served by A kr on water and those 
residing south of the Ohio Turnpike are not under the boil alert. Affected customers 
should boil drinking water for a minimum of 2 minutes. This boil alert was expected to 
be in place for a minimum of 48 hours. 

Source: http://www.ohio.com/news/break-news/boil-alert-for-hudson-twinsburg-water- 
users- 1.344359 



For another story, see item 41 
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Public Health and Healthcare Sector 



17. October 22, Orlando Sentinel - (Florida) Ex-hospital employee pleads guilty to 
stealing patient information. A former Florida Hospital employee pleaded guilty 
October 22 to stealing patient information that was used to solicit customers for 
lawyers and chiropractors, the U.S. Attorney’s Office said. According to prosecutors, 
he worked as a registration representative in the emergency department at Florida 
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Hospital’s Celebration location, where he registered patients as they came into the ER. 
From 2009 until July 201 1, he illegally accessed data from thousands of patients at 
various Florida Hospital locations. He was paid by a co-conspirator to gather 
information from patients who had been involved in vehicle accidents. Patients 
received phone calls within a week of their hospital stay from someone who offered a 
referral to a chiropractor, and the callers knew specific information about the accident 
and the person’s treatment at Florida Hospital. He faces up to 15 years in federal 
prison. He will be sentenced January 14. 

Source: http://articles.orlandosentinel.eom/2012-10-22/news/os-florida-hospital- 
patient-records-arrest-20 121 022 1 patient-data-disclosure-of-health-information- 
personal-information 

18. October 22, Reuters - (National) Meningitis probe could hit hospital drug 

supplies. The extended shutdown of a sister company of the pharmacy at the center of 
the deadly U.S. meningitis outbreak may exacerbate drug shortages for some hospitals 
and healthcare providers as the number of infection cases neared 300, U.S. health 
regulators said October 22. Ameridose, a drug manufacturer owned by the same people 
who own New England Compounding Center, or NECC, has been closed since October 
10. It will remain shuttered until November 5, while authorities inspect the plant, at 
least temporarily cutting off supplies to its customers. NECC shipped thousands of 
potentially contaminated vials of a steroid used for injections to treat severe back pain. 
Some 14,000 patients may have been exposed to the medicine that has so far led to 23 
deaths. Twelve additional fungal meningitis cases were reported October 22, bringing 
the total to 294 in 16 States, plus 3 cases of peripheral joint infection likely linked to 
the tainted steroid, according to the U.S. Centers for Disease Control and Prevention. 
Nine of the new cases were reported in Michigan, which has reported 63 infections and 
5 deaths. 

Source: http://www.reuters.eom/article/2012/10/22/us-usa-health-meningitis-shortages- 
idUSBRE89F18320121022 
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Government Facilities Sector 

19. October 23, Associated Press - (Mississippi) School gym damaged in fire. Authorities 
were investigating a fire that damaged the gym at Winona Christian School in Winona, 
Mississippi, the Associated Press reported October 23. The fire caused school officials 
to cancel classes October 23. The headmaster of the school said a handful of children 
were in the gym when the fire started and they got out safely. The fire burned the roof, 
walls, and floor of the gym and left behind smoke damage to the bleachers and stage, 
he added. He said the fire may have been caused by an electrical problem in a wall. 
Classes are expected to resume October 24. 

Source: http://www.knoe.com/storv/19888496/school-gvm-damaged-in-fire 

20. October 22, New Rochelle Patch - (New York) Bomb threat closes Solomon- 
Schechter school. A bomb threat received via email shut the two campuses of the 
Solomon-Schechter School of Westchester, New York, October 22, sending students 
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home. The private Jewish school serves students from Kindergarten to 12th grade. The 
school has campuses in Hartsdale and White Plains. The Upper School, in Hartsdale 
serving students in grades 6 through 12, was evacuated, Greenburgh Police said. The 
Westchester County Bomb Squad responded to the incident, as well. Although no 
bomb was detected, the administration chose to keep the campus closed for the 
remainder of the day. The Lower School in White Plains was also closed due to the 
threat, according to published reports. The Solomon Schechter Headmaster said both 
schools would reopen October 23 at their regular time. 

Source: http://newrochelle.patch.com/articles/bomb-threat-closes-solomon-schechter- 
school-062d3c96 



21. October 22, San Angelo Standard-Times - (Texas) Bomb threat evacuates Bronte 
schools. A bomb threat via phone sent about 250 students in the Bronte, Texas 
Independent School District home October 22, the Texas Department of Public Safety 
(DPS) said. The elementary and high school students were taken to a local community 
center. Parents picked some of them up, and others were bused home later. An 
unknown individual called the school and said there was a bomb at the school, a Texas 
Department of Public Safety trooper said. The Coke County Sheriff’s Office was 
investigating with the help of DPS, and a K-9 unit from Goodfellow Air Force Base 
was sent to search for bombs on the premises, the DPS trooper said. It took them about 
2 1/2 hours to clear the buildings, he said. School would be in session October 23, the 
district’s superintendent said. The call went to a school employee’s cellphone, the DPS 
trooper said. Texas Rangers will assist in the investigation. 

Source: http://www.gosanangelo.com/news/2012/oct/22/bomb-threat-evacuates-bronte- 
schools/ 



For another story, see item 5 
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Emergency Services Sector 

22. October 23, WHAM 13 Rochester - (New York) Prison in lockdown after riot. Five 
Points Correctional Facility in Seneca County, New York, is on lockdown after a riot 
over the weekend of October 20. Officers at the prison tried to break up a fight between 
inmates October 21. Some of the inmates started to assault the staff — leading officers 
to use canisters of tear gas to get the situation under control. Six officers were hurt; two 
of them had to go to a hospital for treatment but were expected to be fine. Eight 
inmates were transferred to other correctional facilities in New York. The lockdown 
was expected to last through the end of the week of October 22. 

Source: http://www.13wham.com/news/state/storv/Seneca-Co-Prison-In- 
Lockdown/D3KfvOGTlkWJ10NHozFmkg.cspx 

23. October 22, Associated Press - (New York) NYPD cop admits to stealing guns from 
precinct. A New York City Police Department (NYPD) officer admitted to stealing 
guns from police lockers and selling them to drug dealers to pay for his addiction to 
painkillers. He pleaded guilty October 22 to selling four stolen NYPD-issued guns and 
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an additional pistol that belonged to him to a drug ring. The plea deal includes a 15- 
year prison term when he is sentenced November 7. The suspected dealer and three 
accomplices were arrested in July on charges including conspiracy and selling drugs 
and guns. 

Source: http://www.newsdav.com/news/new-vork/nvpd-cop-admits-to-stealing-guns- 
from-precinct- 1 .4143307 

24. October 22, Oklahoma City Oklahoman - (Oklahoma) Oklahoma City police cadet 
died from head trauma. An Oklahoma City police recruit injured during training the 
week of October 8 died from “head trauma, blunt force,” according to the State medical 
examiner. The recruit received a head injury October 12 while working with an 
instructor on routine self-defense tactics and died October 13. A spokeswoman for the 
medical examiner released the cause of death October 19. The fatal injury occurred 
while the recruit was concluding a 78-hour course of defense training for cadets. The 
course culminates with a six-minute exam during which cadets are rigorously tested by 
different instructors on a host of techniques. During a rotation of simulated fights, he 
went to the ground several times with different instructors, police said. While it was not 
a violent hit, his unprotected head had hit the mat several times during the test, the 
police captain said. A new policy now requires that cadets wear protective head gear in 
the self-defense course. 

Source: http://www.officer.eom/news/10818073/oklahoma-citv-police-cadet-died- 
from-head-trauma 
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Information Technology Sector 

25. October 23, Softpedia - (International) Experts locate dropper of Japanese malware 
responsible for making death threats. Approximately 10 days ago, a piece of 
malware making death and bomb threats online on behalf of its victims was discovered. 
Now, researchers from Symantec discovered the malicious element’s dropper. The 
dropper of Backdoor. Rabasheeta — the component responsible for installing the 
payload onto the victim’s computer — creates a registry to ensure that the main module 
is executed each time the device is activated. After it drops the main module and the 
configurations files that enable the threat to communicate with its command and 
control server, it removes itself from the infected computer. Backdoor. Rabasheeta has 
the capability to open a backdoor on the compromised device and allow its controller to 
take command of it. 

Source: http://news.softpedia.com/news/Experts-Locate-Dropper-of-Japanese- 
Malware-Responsible-for-Making-Death-Threats-301400.shtml 

26. October 23, T/re 7/ - (International) CyanogenMod logged lockscreen swipe 
gestures. A developer discovered that the popular modified Android firmware 
CyanogenMod apparently recorded swipe gestures used to unlock smartphones. The 
CyanogenMod project provides manufacturer-independent open source custom ROMs 
for Android devices. In August, an update was released which modified the fixed 3x3 
grid format for lockscreen gestures to make the grid size configurable (by adding a 
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PATTERN_SIZE variable). In the process, a line of code to log gestures used was also 
added. A researcher now discovered this code. Eogging unlock gestures is comparable 
to recording passwords entered by users. Neither represents a direct threat, as without 
access to the device, attackers cannot access the log file. However, it nonetheless poses 
an unnecessary risk that could allow data which should be confidential to fall into the 
wrong hands- - for example by compromising a backup saved to a PC. 

Source: http://www.h-online.com/securitv/news/item/CvanogenMod-logged- 
lockscreen-swipe-gestures- 1734701 .html 

27. October 23, Help Net Security - (International) Malvertising on Yahoo Messenger 
hijacks browsers’ start page. Yahoo Messenger users who followed the link in an 
advertisement for Vietnamese Internet directory Web site EaBan(dot)vn and 
downloaded the offered executable installed a persistent application that repeatedly 
leads them to the Web site. “It is not yet clear whether the banner has reached YIM 
customers following a legit advertising campaign that was modified by the advertiser 
later, or if it is an abusive attack that exploits a bug in the Yahoo Ad services,” said a 
Bitdefender researcher, but the banner was displayed for 4 hours. The problem with the 
app is that it cannot be easily deleted. The app adds itself to the Windows startup 
entries in order to run after every system reboot, and it repeatedly changes the default 
start page of the browsers found on the affected computer. The researcher did not 
mention whether the EaBan(dot)vn Web site offers other malicious software except for 
this app. 

Source: http://www.net-securitv.org/malware news.php?id=2300 

28. October 23, The H - (International) Google Drive opens backdoor to Google 
accounts. The Windows and Mac OS X desktop clients for Google’s Drive file storage 
and synchronization service open a backdoor to users’ Google accounts which could 
allow the curious to access a Drive user’s email, contacts, and calendar entries. The 
sync tool includes a “Visit Google Drive on the web” link which opens Drive’s Web 
interface in the default browser and automatically logs the user in. Somewhat 
problematic is the fact that this session can then be used to switch to other Google 
services such as Gmail and Google Calendar. Even if the user explicitly logs out of the 
Google sites by clicking the “Sign out” link, the Drive client will open a new session 
without requiring a password. The desktop clients request login credentials only once, 
when they are first installed and launched. The backdoor is particularly problematic 
where a user shares their account with others or where a computer is not password 
protected. The link also makes accessing a user’s Google account unnecessarily simple 
for trojans. 

Source: http://www.h-online.com/securitv/news/item/Google-Drive-opens-backdoor- 
to-Google-accounts-1735069.html 

29. October 23, T/re //- (International) Security researcher experiments with patching 
Java. With Oracle planning to wait until Eebruary 2013, a security researcher decided 
to take matters into his own hands by developing a patch for a critical security 
vulnerability he discovered in Java. He posted a report on his efforts to security mailing 
list Pull Disclosure. However, the patch is not intended for publication — as this would 
reveal details of the vulnerability, which the researcher has kept hidden so far. Instead, 
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the researcher hopes his experiment will prompt Oracle to speed up its process for 
releasing official patches. He informed Oracle of the critical vulnerability in late 
September. It potentially enables an attacker to use a specially crafted applet to access 
assets on a system with user privileges. He was, however, too late for the company’s 
October patch day. Oracle informed him that it was already in the final stages of testing 
its October patches and that any patch would have to be held over until the next critical 
patch update, scheduled for February 19, 2013. In order to estimate the amount of work 
involved, the security researcher then decided to develop a patch himself and found that 
fixing the vulnerability required changing just 25 characters of code in 30 minutes. 
According to the researcher, the patch has no discernible effect on the code logic, 
rendering extensive integration tests to check its effect on other programs superfluous. 
Source: http://www.h-online.com/securitv/news/item/Securitv-researcher-experiments- 
with-patching-Java-1735346.html 

30. October 23, The H - (International) Adobe fixes critical Shockwave 

vulnerabilities. Numerous critical flaws in Shockwave, which could allow an attacker 
to inject malicious code into a system, were closed by Adobe with the release of 
Shockwave Player 11.6.8.638 for Windows and Macintosh systems. Overall, the 
vulnerabilities have six CVE numbers assigned to them (CVE-2012-4172, CVE-2012- 
4173, CVE-2012-4174, CVE-2012-4175, CVE-2012-4176, CVE-2012-5273) and are 
mostly buffer overflows with one array out of bounds vulnerability. Adobe said the 
update is a priority 2 issue. The company recommends users update their installations 
as soon as is possible, but notes there are no known Shockware exploits in the wild for 
these flaws. 

Source: http://www.h-online.com/securitv/news/item/Adobe-fixes-critical-Shockwave- 
vulnerabilities- 173537 1 .html 



3 1 . October 22, Computer Weekly - (International) XSS attacks remain top threat to 
Web applications. Cross-site scripting (XSS) attacks remain the top threat to Web 
applications, databases, and Web sites, an analysis of 15 million cyberattacks in the 
third quarter of 2012 revealed. Other top attack techniques are directory traversals, 

SQE injections (SQEi), and cross-site request forgery (CSRE), according to the latest 
Web application attack report by cloud hosting firm EireHost. The increase in the 
number of cross-site attacks is one of the most significant changes in attack traffic 
between Q2 and Q3 2012, the report said. XSS and CSRE attacks rose to represent 64 
percent of the group. XSS is now the most common attack type, with CSRE now in 
second. 

Source: http://www.computerweeklv.eom/news/2240168930/XSS-attacks-remain-top- 
threat-to-web-applications 

32. October 22, Infosecurity - (International) Cross-zone scripting vulnerabilities found 
in Dropbox and Drive. ’’Exploiting this vulnerability,” announced IBM’s Application 
Security Insider blog, “an attacker could steal arbitrary files from a DropBox / Google 
Drive user by tricking him into viewing a malicious HTME file inside the mobile app.” 
Applications such as Dropbox and Drive are of increasing relevance to business, and 
their security is of increasing importance. As the bring-your-own-device revolution 
gathers pace more and more employees are using such cloud storage services as a 
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simple means of transferring data from corporate servers to personal tablets or 
smartphones. The problem, according to an advisory released by a researcher, is that 
“the DropBox apps use an embedded browser window to render the locally stored 
HTML file.” The way this has been implemented would allow the execution of 
malicious Javascript code “to steal potentially valuable information from the DOM of 
the embedded browser, an attack dubbed Cross-Application Scripting (XAS).” 

Source: http://www.infosecuritv-magazine.com/view/28915/crosszone-scripting- 
vulnerabilities-found-in-dropbox-and-drive/ 

33. October 22, Ars Technica - (International) Java still has a crucial role to play — 
despite security risks. Java has its security flaws, but it is not going away any time 
soon — many important applications run on the technology, especially in business 
settings. Still, many users are worried enough about vulnerabilities that they restrict 
Java’s ability to run on their machines. That is what Ars Technica heard when it asked 
its readers October 19 whether they let Java run on their computers, and why. Some 
users disabled or uninstalled Java entirely. However, the most common solution for 
those worried about security risks is to leave the Java Runtime Environment in place on 
the desktop while disabling the browser plugins that allow Java applets to run on Web 
sites. Those plugins are often vulnerable to attacks involving remote code execution. 
Source: http://arstechnica.eom/information-technologv/2012/10/java-still-has-a-crucial- 
role-to-play-despite-securitv-risks/ 

34. October 22, U.S. Federal Trade Commission - (International) Tracking software 
company settles FTC charges that it deceived consumers and failed to safeguard 
sensitive data it collected. Web analytics Compete Inc. agreed to settle Federal Trade 
Commission (FTC) charges that it violated federal law by using its Web-tracking 
software that collected personal data without disclosing the extent of the information 
that it was collecting. The company also allegedly failed to honor promises it made to 
protect the personal data it collected. Compete is a company that uses tracking software 
to collect data on the browsing behavior of millions of consumers, then uses the data to 
generate reports, which it sells to clients who want to improve their website traffic and 
sales. The proposed settlement will require that Compete obtain consumers’ express 
consent before collecting any data from Compete software downloaded onto 
consumers’ computers, that the company delete or anonymize the use of the consumer 
data it already has collected, and that it provide directions to consumers for uninstalling 
its software. 

Source: http ://w w w . ftc . go v/opa/20 12/1 0/compete . shtm 

Internet Alert Dashboard 
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Communications Sector 



35. October 22, Forbes - (International) Amazon AWS goes down again, takes Reddit 
with it. October 22, several Web sites that use Amazon’s AWS cloud-computing 
service for hosting, including Reddit, Coursera, Flipboard, FastCompany, Foursquare, 
Netflix, Pinterest, Airbnb, and more, were down as it experienced “degraded 
performance for a small number of BBS volumes in a single Availability Zone” in the 
northern Virginia zone. When problems began Amazon reported, “we are currently 
investigating degraded performance for a small number of BBS volumes in a single 
Availability Zone in the US-EAST- 1 Region.” Then, about an hour later, the company 
updated its Service Health Dashboard: “We can confirm degraded performance for a 
small number of BBS volumes in a single Availability Zone in the US-EAST- 1 Region. 
Instances using affected BBS volumes will also experience degraded performance.” 
Amazon updated their customers throughout October 22, before finally stating “we are 
continuing to restore impaired volumes and their attached instances.” While some Web 
sites, such as Reddit, were back up October 22, others that rely on AWS were 
reportedly still experiencing problems. 

Source: http://www.forbes.eom/sites/kellvclav/2012/10/22/amazon-aws-goes-down- 
again-takes-reddit- with-it/ 

36. October 22, r/rrea/po5t - (International) HackRF Jawbreaker could bring low-cost 
wireless hacking to the masses. A researcher created a new radio called HackRF that 
is a kind of all-in-one hacker’s dream with functionality to intercept and reverse- 
engineer traffic from a wide range of frequencies and sources. HackRF is the work of a 
researcher from Great Scott Gadgets, and the idea behind the project was to build a 
multipurpose transceiver that a user could attach to his computer and use as a 
“software-defined radio.” He released the hardware specifications and the software for 
the radio, called HackRF Jawbreaker, on Github. The device has the ability to transmit 
and receive over a wide range of frequencies, covering a huge number of commercial 
devices. 

Source: http://threatpost.com/en us/blogs/hackrf-jawbreaker-could-bring-low-cost- 
wireless-hacking-masses- 1022 1 2 
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Commercial Facilities Sector 



37. October 22, KXAS 5 Dallas -Fort Worth - (Texas) ATF probes molotov cocktail 
attack in Hurst. Federal agents are trying to identify who threw small explosive 
devices at a lawyer’s office and an oil company in Hurst, Texas. Firefighters discovered 
Molotov cocktails when they responded to a report of a fire October 21, said a 
spokesman for the U.S. Bureau of Alcohol, Tobacco, Firearms, and Explosives (ATF). 
ATF is leading the investigation, he said. The firebombs were hurled into the law firm 
and the neighboring Falcon Petroleum Resources. The device at the oil company did 
not ignite, but a fire did extensive damage. Evidence collected at the scene was sent to 
an ATE laboratory in California. Agents were also reviewing surveillance video in the 
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area, the spokesman said. 

Source: http://www.nbcdfw.com/news/local/ATF-Probes-Molotov-Cocktails-In-Hurst- 
175278621. html 



38. October 22, Wilmington Star News - (North Carolina) Leland hotel target of 

sprinkler hoax again. For the second time in 2012, a hotel in Leland, North Carolina, 
fell victim to a prankster who called and instructed a guest to dismantle the sprinkler in 
the room because of a gas leak. According to a Leland Police Department spokesman, 
an unknown caller contacted the front desk of the Best Western Hotel October 21 and 
asked to be transferred to a room. When the occupant of the room answered the phone, 
the caller directed the tenant to activate the fire sprinkler located in the room because 
there was a gas leak. After the occupant complied with the caller’s directions and water 
filled the room, the caller disconnected. An estimate on damages was not immediately 
available. Authorities said the same prank was pulled on the Best Western in March. In 
that instance, the ensuing flood of water damaged 27 rooms. “Detectives are 
investigating any and all leads and are planning on possible collaboration with federal 
officials to aid in this investigation,” authorities said October 22. 

Source: http://vellowtape.blogs.stamewsonline.com/21033/leland-hotel-target-of- 
vandal-a-second-time/?tc=ar 



39. October 22, Citrus Daily - (Florida) Gas leak empties Inverness apartment 
complex. No injuries were reported from a natural gas leak October 21 that caused the 
temporary evacuation of an apartment complex in Inverness, Florida. Citrus County 
Sheriff’s Office, Division of Fire Rescue was dispatched to the site of the leak. First 
responders arrived on scene and found a natural gas leak coming out from the roadway 
in two different locations. According to the fire report, the gas line was hit by a 
contractor laying communications lines. An initial safety perimeter was established and 
residents at an apartment complex were evacuated due to being in close proximity to 
the leak. The gas company (Florida Public Utilities) was contacted and responded to 
secure the leak, and a HAZMAT unit was requested to respond for atmospheric 
monitoring of the area. There were two engines, two HAZMAT units, and the battalion 
chief assigned to the incident. The incident was brought under control, and all residents 
were allowed to return no more than 2 hours after the event. 

Source: http ://w w w . citrusdaily . com/gas -leak-empties -Inverness - apartment- 
complex/20 12/ 10/22/ 107049. html 

40. October 22, Kansas City Star - (Missouri) KC business owner shoots two in 
warehouse burglary. A business owner in Kansas City, Missouri, shot and wounded 
two burglars who broke into his vacant warehouse October 21, police said. In 
September, the owner shot and wounded two different burglars inside the same 
warehouse. Burglars broke into the building five times in recent months. In the October 
21 shooting, the owner responded to an alarm call and found two men inside the 
building stealing copper. The owner shot one man in the shoulder and arm. The second 
man suffered a gunshot wound to his back and collapsed around a bunch of hand tools 
and a cut piece of copper. When officers arrived at the scene, they found one of the 
wounded men in a parking lot behind the building. He initially told police he was cut 
by a fence, but he later said that he was shot and that his nephew was still inside the 
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building. Both men live in Kansas. September 25, the owner confronted two burglars 
inside the building. He shot one person in the leg and a second person in the abdomen. 
The vacant building is attached to another building that houses a company that makes 
baby furniture. The owner owns both buildings. Prosecutors were considering charges 
against the two burglary suspects. 

Source: http://www.kansascitv.eom/2012/10/22/3879640/kc-business-owner-shoots- 
two-in.html 



41. October 22, North County Times - (California) Sewage spill closes water access at 
Powerhouse Park. Residents were told to stay out of the water near Powerhouse Park, 
California, after 300 gallons of sewage spilled nearby. Sewage spilled from a manhole 
after an unknown substance blocked a sewer line October 20, according to a spokesman 
with Del Mar’s Public Works Department. The sewage seeped into a nearby storm 
drain that empties in the ocean near Powerhouse Park. Crews have since cleared the 
blockage. Until samples confirm the water is safe to use, signs would be posted 500 
feet north and south of the park warning people of the spill, according to a news 
release. 

Source: http://www.nctimes.com/news/local/del-mar/sewage-spill-closes-water-access- 
at-powerhouse-park/article 3d5d42bl-450f-5ae5-b7bl-d3bb068f2e88.html 
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Nothing to report 
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Dams Sector 



42. October 23, Nanuet Patch - (New York) United Water replacing gates at Lake 
DeForest Dam. United Water started the replacement of two gates at the Lake 
DeForest Dam in New York, the Nanuet Patch reported October 23. The company was 
replacing the gates, which respond to the level of water in the reservoir when there is a 
significant rainfall and more water flows into the reservoir. According to United Water, 
the 56-year-old gates help to protect the integrity of the dam. The original gates, 
designed specifically for the Lake DeForest water supply dam, will be replaced with 
similar gates. Upon completion of the 6-month project, the dam will continue to operate 
according to the same procedures which are currently in effect. “This project is a $2.5 
million investment in Rockland’s future,’’ said the United Water New York vice 
president and general manager. “It will help ensure that we can continue to deliver a 
reliable supply of water for homes, businesses, and firefighting.” Reservoir levels will 
be maintained throughout the project and customers will have an ample supply of 
water. United Water stated licensed professional engineers, who are dam experts, will 
supervise the work and it will comply with all applicable laws and regulations. United 
Water New York officials stated the company invests between $25 and $30 million 
each year in infrastructure improvements. 
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Source: http://nanuet.patch.com/articles/united-water-replacing-gates-at-lake-deforest- 
dam 



43. October 22, Houma Today - (Louisiana) Work starts this week on storm-damaged 
levee. Work should begin the week of October 22 to repair a marsh-management levee 
in Montegut, Louisiana, which blew out during Hurricane Isaac, officials said. The 
storm’s tidal force destroyed one of the levee’s water-control structures, a type of gate 
that helps control salt water flowing through the Pointe-aux-Chenes Wildlife 
Management Area. The structure was washed away, leaving a 50-foot gap in the levee. 
A $2.4 million Federal Emergency Management Agency project aimed at strengthening 
the levee’s second water-control structure with a bridge capable of supporting heavy 
equipment was nearly complete, and the Terrebonne levee director said he expects to 
be able to truck dirt onto the levee to begin closing the breach the week of October 22. 
“We expect by Wednesday or Thursday to begin hauling dirt into the area,” he said. 
“The repairs should be complete by the end of this year.” That project was unfinished 
when Hurricane Isaac struck. The vulnerable levee, which crosses open water in the 
Wildlife and Fisheries’ Pointe-aux-Chenes Wildlife Management Area, has caused 
repeated problems for the Terrebonne Levee District. The levee failed during nearly 
every storm that blew through the parish. Without a permanent fix, the Levee District 
will continue to spend millions on repeated repairs to the levee, the levee director said. 
Source: 

http://www.houmatodav.com/article/2Q 121 022/ ARTICLES/ 1 2 1029900?p= 1 &tc=pg 
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